CVE-2022-46710
MEDIUMiOS <16.2- iPadOS <16.2 - macOS Ventura <13.1 - Info Disclosure
Title source: llmDescription
A logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Location data may be shared via iCloud links even if Location metadata is disabled via the Share Sheet.
References (2)
Core 2
Core References
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213530
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213532
Scores
CVSS v3
5.5
EPSS
0.0008
EPSS Percentile
23.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-841
Status
published
Products (3)
apple/ipados
< 16.2
apple/iphone_os
< 16.2
apple/macos
< 13.1
Published
Jan 10, 2024
Tracked Since
Feb 18, 2026